SMTP: .MDE
This signature detects e-mail attachments that have the extension .mde and were sent through SMTP. Because .MDEs (Microsoft Access MDE database) files can contain scripts and macros, this can indicate an incoming e-mail virus. Attackers can create malicious scripts, tricking users into executing the file and infecting the system.
Extended Description
The impact on the target system is dependent on the instructions contained in the malicious .mde file.
Short Name
SMTP:EXT:DOT-MDE
Severity
Minor
Recommended
False
Recommended Action
None
Category
SMTP
Keywords
.MDE
Release Date
07/28/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown